jamie
banner
jamie.ideasasylum.com
jamie
@jamie.ideasasylum.com
Previously, @ideasasylum on Twitter but not active there any more.
Also found on Mastodon: https://ruby.social/@jamie.
Blog: https://jamie.ideasasylum.com
Links: https://www.jamielawrence.me

CTO @ Podia. Swimmer. Ruby developer.

The app looks complete and polished but in reality it’s still immature and untested
October 29, 2026 at 11:04 AM
I think apps written by AI have more bugs primarily because they are immature.

If you write the app by hand, it would take weeks or months before you had some vaguely useful. And in that time you’ll have used it a lot, tested it, fixed it.

But now? That app arrives fully formed in hours
October 29, 2026 at 11:04 AM
just reading that one now! I enjoy the books but have to interleave them with something else
October 28, 2026 at 8:14 PM
@andrewm.codes recognise this?
October 27, 2026 at 11:14 PM
Yeah, I was one of those kids that learned to program the hard way by typing in programs from magazines and then debugging them. Not quite as hard as punch cards but still.

Makes me wonder: what about today’s wondrous “tell the machine what you want” programming will seem like a Stone Age in 40yrs?
How to Install an App on Your Commodore 64. “Oh, don’t worry, you’ll just need to type in the code for that program. There’s an article explaining what MLX is, which you can read really quickly on page 93, and then you’ll find the code for it on page 94.” [anildash.com]
How to install an app on your Commodore 64 - Anil Dash
It’s time to install an app! But here in 1986, we still call them “programs,” not apps. So, you’ll want to set aside some time to get started installing a program.
www.anildash.com
October 27, 2026 at 11:23 AM
Reposted by jamie
this is a good post by Katelyn Lesse, head of platform at Anthropic about the problems the industry needs to solve for multi-agent systems. most pressingly imo - authentication and authorisation.

"Security and proper isolation are critical for untrusted code and content." - sandboxes 🚀
The new set of problems for engineers to solve
AI just isn't going to be able to create the incredible outcomes it's capable of creating unless software engineers solve problems to make it possible.
www.katelynlesse.com
October 26, 2026 at 12:38 PM
Reposted by jamie
October 26, 2026 at 11:00 AM
All this 👇

Hiding the use of AI just breeds distrust in a team
It's not just advertising: if I use AI assistance, I'd rather disclose than not, because I want people to be aware that it was not entirely my own work, even if I have checked it over myself. People have a right to know whether they're interacting with an unassisted human, a centaur, or a machine.
October 25, 2026 at 10:29 PM
Data centres have a terrible public perception because no one bothers their bollocks to HONESTLY explain to the public what they are, what they are used for, why they are useful to society, and how they benefit the economy

Then maybe both sides can have reasonable conversations on their development
October 25, 2026 at 10:25 PM
My god, these people are so incredibly shit at their jobs.

It shouldn’t be that fucking hard to convince people USING THE FUCKING DATA CENTRES ALL DAY EVERY DAY that data centres have _some_ value to society.

But no, let’s shit all over a popular and well-respected author 🤦‍♂️
"So Sally Rooney has published six and a half million books - that's quite a lot of books, well done - but that's about 15,000 tonnes of emissions."

Ireland's data centre industry boss has lashed out at writer Sally Rooney for her opposition to the sector
www.thejournal.ie/sally-rooney...
http://www.thejournal.ie/sally-rooney-data-centres-7105655-Oct2026/
www.thejournal.ie
October 25, 2026 at 10:20 PM
Reminded myself that AI can’t take away my ability to swim 5km every Sunday.

Although the motivation today required a fair amount caffeine and carbs
October 25, 2026 at 10:15 PM
Sounds like a perfect use case for Jev
October 25, 2026 at 8:34 PM
Deadpool and Wolverine: Let's F***kin Go!
ALT: Deadpool and Wolverine: Let's F***kin Go!
static.klipy.com
October 25, 2026 at 5:10 PM
Reposted by jamie
In the 1980s, PCs were everywhere but productivity gains were nowhere to be found until the 1990s. The internet similarly took years to deliver an economic payoff. This is the Productivity J-Curve.

Companies can adopt AI but until they change how they operate, they won’t financially benefit from it
October 24, 2026 at 11:41 PM
Reposted by jamie
This must be the real reason witches have black cats then. It’s all about the reposts.

bsky.app/profile/sara...
October 24, 2026 at 7:14 PM
Traffic can also through Cloudflare WARP which is part of the Cloudflare IP address range (watching one right now do that) so yeah setting the header is the better approach.
October 24, 2026 at 6:48 PM
Reposted by jamie
In AWS you can configure a security group to only allow traffic from CloudFront's ip address range but it's still recommended to add a X-Origin-Verify header with a secret token like your post because anyone can create a distribution. We don't need to handle it in our apps because the LB checks it.
October 24, 2026 at 6:24 PM
PSA: you might not know this—because I certainly didn't—but you _need_ to verify that all traffic reaching your server has come through your firewall.
jamie.ideasasylum.com/2026/10/24/h...
How to secure your Cloudflare install (or other WAF)
If your origin server accepts traffic from anywhere, an attacker can route straight around your WAF. Here’s the simple check and fix that most Cloudflare installs probably skip.
jamie.ideasasylum.com
October 24, 2026 at 6:18 PM
Reposted by jamie
EU Member States agree on "simplifying" GDPR and other EU data laws - must still be negotiated with the European Parliament
www.consilium.europa.eu/en/press/pre...
Digital rulebook: Council agrees position to simplify data protection, privacy and cyber reporting rules
Simplification: Council agrees position to streamline EU’s data, privacy and cyber reporting rules.
www.consilium.europa.eu
October 22, 2026 at 7:27 AM
A system without AI agents monitoring and defending it will inevitably be a compromised system.
October 22, 2026 at 1:33 PM
Reposted by jamie
October 21, 2026 at 4:08 PM
Reposted by jamie
the railway breach seems to be another case of grabbing anthropic / openai keys

the issue here is tokens are basically cash, you can immediately sell them on the black market where there's a ton of demand particularly from distillers with deep pockets 1/2
October 21, 2026 at 10:24 PM
or maybe something closer to CI: www.rwx.com
The CI/CD platform for the agentic dev cycle
Legacy CI/CD platforms haven’t caught up to the realities of the agentic dev cycle. We give you the tools to leverage your newfound velocity.
www.rwx.com
October 21, 2026 at 10:28 PM
October 21, 2026 at 10:26 PM